CVE-2020-14416

In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.

• CWE-362
• CWE-416

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.htmlMailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1162002Issue Tracking, Patch, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.16Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ace17d56824165c7f4c68785d6b58971db954ddPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.htmlMailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1162002Issue Tracking, Patch, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.16Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ace17d56824165c7f4c68785d6b58971db954ddPatch, Vendor Advisory

Published

Jun 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14409SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer…7.8
• CVE-2020-14410SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-bas…5.4
• CVE-2020-14412NeDi 1.9C is vulnerable to Remote Command Execution. System-…8.8
• CVE-2020-14413NeDi 1.9C is vulnerable to XSS because of an incorrect imple…6.1
• CVE-2020-14414NeDi 1.9C is vulnerable to Remote Command Execution. pwsec.p…8.8
• CVE-2020-14415oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandle…3.3
• CVE-2020-14418A TOCTOU vulnerability exists in madCodeHook before 2020-07-…7
• CVE-2020-1442A spoofing vulnerability exists when an Office Web Apps serv…6.1
• CVE-2020-14421aaPanel through 6.6.6 allows remote authenticated users to e…7.2
• CVE-2020-14422Lib/ipaddress.py in Python through 3.8.3 improperly computes…5.9
• CVE-2020-14423Convos before 4.20 does not properly generate a random secre…5.3
• CVE-2020-14424Cacti before 1.2.18 allows remote attackers to trigger XSS v…6.1